curl --location 'http://127.0.0.1:8000/api/incidents' \
--header 'Accept: application/json' \
--header 'Authorization: Bearer {token}' \
--header 'Content-Type: application/json' \
--data '{
"alert_id": 3,
"assigned_to": 2,
"title": "Unauthorized Access Investigation",
"description": "Unauthorized access attempts were reviewed and access controls were reinforced.",
"severity": "high",
"status": "mitigated",
"started_at": "2026-05-28 10:08:00",
"closed_at": "2026-05-28 11:30:00"
}'{
"message": "Incident created successfully",
"data": {
"id": 3,
"alert": "Unauthorized access attempt detected on a protected endpoint.",
"assigned_to": "analyst",
"title": "Unauthorized Access Investigation",
"severity": "high",
"status": "mitigated"
}
}